Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CFCB4988F3511F1813A4FB8CE1D38B0.roa
File: 6CFCB4988F3511F1813A4FB8CE1D38B0.roa (raw, json)
Hash identifier: SKTvhCqX+qUBIH+49uNbMx0JQCLJ372MxaQhJrbYuZo=
Subject key identifier: D2:25:59:0A:E8:BB:DC:C6:F6:48:5D:6C:FD:7F:DD:D2:1D:2D:64:B2
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A1A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CFCB4988F3511F1813A4FB8CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:18:25 +0000
ROA not before: Mon 03 Aug 2026 12:18:21 +0000
ROA not after: Sat 30 Jul 2033 12:18:21 +0000
asID: 37119
IP address blocks: 105.174.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586 (0xa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:18:21 2026 GMT
Not After : Jul 30 12:18:21 2033 GMT
Subject: CN=6a708711-91bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:5b:84:1a:f1:50:a8:c7:74:54:66:b7:6b:
5d:86:f0:03:4e:07:c7:4d:40:a2:1b:4f:04:2c:e9:
1a:41:04:3d:bc:83:9a:cd:36:1e:12:54:d7:68:3e:
11:20:38:cf:b8:ca:bb:c4:26:b1:4d:eb:19:15:5a:
6f:62:b0:61:0d:ae:8d:fd:d9:fc:f3:25:ad:0f:98:
3c:68:d7:54:c8:5f:0d:24:8a:c8:29:08:47:f6:ab:
a9:e9:3a:17:d7:6c:8d:31:ca:1b:15:93:62:4f:3b:
28:09:f6:06:bf:da:51:77:fb:bd:9c:8d:1b:54:c3:
1e:84:7f:3d:d7:dc:5a:71:23:69:5f:a7:04:10:77:
1c:96:66:d8:29:62:60:06:33:c0:46:5d:19:0a:ef:
27:2c:94:6d:ea:ae:d0:1b:dd:5e:02:1b:73:6a:2c:
96:0a:f7:e4:97:51:2e:0f:f0:6f:f6:25:02:fe:e9:
7e:b7:f4:a4:ae:35:4a:51:bc:47:57:db:c6:e3:c3:
1a:35:ea:3d:93:a1:53:f6:50:af:d1:09:45:2f:25:
b0:90:3a:ff:5c:dd:20:3d:ec:8e:a3:6a:f9:78:02:
4d:2e:71:c1:93:d5:1b:c5:bb:91:7f:0d:da:39:e5:
14:28:d9:47:a3:b8:8f:44:51:43:f4:bf:9f:92:53:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:59:0A:E8:BB:DC:C6:F6:48:5D:6C:FD:7F:DD:D2:1D:2D:64:B2
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CFCB4988F3511F1813A4FB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:c2:c1:5d:ee:c7:fd:1b:4b:e5:8a:a0:b3:08:d4:27:61:39:
6c:d6:d0:ca:04:9d:ba:ef:d3:36:8a:1e:92:31:18:26:4c:d3:
d7:8f:fa:7c:af:f0:3a:25:ad:fd:cd:06:1c:33:f1:bb:fd:b4:
dc:69:16:3c:30:09:5d:bf:6b:eb:4b:74:07:e8:b6:04:ce:09:
e4:8e:ed:15:2a:af:d9:7d:a2:35:9e:a2:0f:fd:72:d2:e2:bf:
de:da:40:25:5a:30:5b:bc:75:9c:d3:c1:ee:e4:39:1e:2d:63:
91:4a:a5:61:b2:7c:26:a9:1c:15:c5:a1:fe:77:85:74:bb:bd:
2a:ff:52:5a:87:d9:35:55:89:70:d6:f9:ba:bf:e5:8f:88:98:
f4:e3:0f:78:39:84:66:3e:ea:e4:57:f6:a0:39:fd:9a:9f:9c:
ff:d1:72:62:09:21:c3:bb:85:d6:86:7b:ed:87:f2:24:db:51:
f1:0b:cf:f8:b9:28:5f:a1:ba:fe:58:35:64:4d:c2:d7:0e:c3:
ad:5f:24:32:10:c9:5e:79:d6:20:24:d0:b1:60:17:dd:0f:f6:
8d:89:89:90:f2:81:0c:96:71:9e:30:a9:52:46:b1:b2:8e:2a:
8c:7f:6a:77:3b:d7:f2:19:09:98:1b:07:6c:d3:64:f4:52:6b:
5e:1c:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:41 2026 by rpki-client